Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231362e302f32342d3234203d3e20323030343832.roa
File:                     3135372e3235342e3231362e302f32342d3234203d3e20323030343832.roa (raw, json)
Hash identifier:          s/Xk2YW3Q3WXyf9GOFsIu2jYKr6u4mYtIywi5kYFHWc=
Subject key identifier:   85:3D:B7:D6:7D:F3:DF:BD:82:C8:9E:5E:A8:BF:82:58:3E:C2:1C:DB
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       662BA343F438C14C0E13DE96373D1AE72B732948
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231362e302f32342d3234203d3e20323030343832.roa
Signing time:             Thu 25 May 2023 12:54:29 +0000
ROA not before:           Thu 25 May 2023 12:49:29 +0000
ROA not after:            Thu 23 May 2024 12:54:29 +0000
asID:                     200482
IP address blocks:        157.254.216.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2b:a3:43:f4:38:c1:4c:0e:13:de:96:37:3d:1a:e7:2b:73:29:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 25 12:49:29 2023 GMT
            Not After : May 23 12:54:29 2024 GMT
        Subject: CN=853DB7D67DF3DFBD82C89E5EA8BF82583EC21CDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ac:41:04:31:5c:6a:6a:4d:0f:4a:b6:24:2c:
                    b8:a3:d3:42:97:a8:79:18:49:87:65:f6:60:35:f1:
                    38:98:cc:a4:b6:c7:08:cb:96:ab:e0:40:e1:18:be:
                    53:bc:d5:03:2e:03:a8:43:08:9a:bf:55:05:5b:c8:
                    0d:a3:35:f0:14:cc:57:ca:04:ef:38:9f:b7:81:a2:
                    c3:72:c5:9e:aa:53:25:3d:07:fe:27:b4:38:ff:87:
                    2a:e9:e7:2d:8a:7b:64:56:c1:1f:5b:39:ec:eb:02:
                    8e:2a:f3:fc:fa:13:4b:4d:c8:d8:da:1b:d0:41:47:
                    d7:f3:0b:10:7c:ad:7a:94:4d:bc:c5:1e:3f:a2:73:
                    58:3f:3d:da:3d:13:71:4a:4c:c5:3a:38:38:7c:17:
                    18:8f:23:c2:14:9a:c2:d5:87:2a:73:ea:f5:fd:e1:
                    f6:3d:7b:f8:70:34:e4:3a:c1:49:c4:9e:4d:8e:ed:
                    60:4f:93:de:36:4a:ad:49:8d:a3:05:2d:20:d0:12:
                    ac:39:c4:31:28:9f:35:25:1d:a3:ba:21:08:92:8e:
                    66:1d:6b:b9:83:53:7b:3b:70:4d:7b:e0:c3:5d:e7:
                    a2:a1:b1:10:02:cc:4e:f3:44:aa:44:2d:b2:ba:ca:
                    55:83:df:2e:df:86:4f:06:91:fd:d7:ec:c6:fb:8e:
                    1f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3D:B7:D6:7D:F3:DF:BD:82:C8:9E:5E:A8:BF:82:58:3E:C2:1C:DB
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/3135372e3235342e3231362e302f32342d3234203d3e20323030343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:67:22:6c:94:a9:cf:d4:7f:b0:22:03:7c:40:30:5d:bd:04:
         5d:66:9a:61:cb:6b:24:ba:0f:20:3d:ef:1c:a9:c8:a3:2f:13:
         7e:85:fb:c6:0a:27:de:a2:99:a7:35:08:86:95:38:dc:39:ba:
         28:e5:9d:18:27:a1:4c:ee:6e:6e:bb:70:72:32:05:d9:32:8a:
         29:3e:61:4f:cc:fc:d7:4f:c0:97:af:81:2f:69:55:e5:6b:fd:
         87:71:1d:c1:b4:4b:03:6b:65:9e:79:c5:e9:9d:40:f6:84:9e:
         67:cc:fa:cf:46:c0:13:85:dc:6a:65:9d:c9:35:92:69:44:13:
         0d:8c:59:4b:f6:44:7a:f2:cb:57:11:d7:b4:b1:f5:14:88:b2:
         f6:c8:ca:3a:f8:5c:63:7d:84:91:27:43:f0:2e:28:e5:9e:8b:
         9c:f1:8a:d9:99:28:15:2e:72:e0:8b:bf:5f:5b:e0:a9:65:98:
         cf:fb:1f:83:96:23:cb:80:a9:43:ea:a7:3e:57:8a:16:e0:65:
         80:73:bb:8e:22:2b:dd:c4:bc:13:8e:36:1b:13:47:98:af:46:
         0a:6a:bc:47:e9:ab:cd:39:89:e8:23:07:7d:c6:9e:4a:46:0b:
         a8:5b:87:f9:c7:23:62:f4:79:19:3d:56:2a:7d:e7:3f:34:74:
         5e:ec:2b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----